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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) In a server, a Amethod comprising: 

registering a first party and a second party with a database at a server, wherein the 
first part is registered as a party relying upon on a second party's 
certificate; 

revoking the second party's certificate after registering the first part y, wherein the 
revocation is performed according to a revocation policy ; and 

initiating communication with the first party to indicate that the second party's 
certificate has been revoked , wherein the communication includes 
notifying the first party that the second party's certificate has been, 
revoked, wherein the notification is further sent to other parties registering 
with the database as relying on the second party's certificate . 

2. (Currently Amended) The method of claim L wherein revoking the second party's 
certification further comprises: 

receiving a request to revoke the second party's certificate; and 
revoking the second party's certificate in accordance with a revocation policy 
associated with the second party's certificate in response to the request. 

3. (Currently Amended) The method of claim 2 X wherein initiating communication 
with the first party further comprises sending a revocation message to a machine 
that is associated with the first party. 

4. (Currently Amended) The method of claim 3 further comprising the m aeteae 
associated with the first -parSy-verifying fee-authenticity of the revocation message 
and modifying access control information of tho machine t o indicate the 
revocation of the second party's certificate. 
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5. (Currently Amended) The method of claim 2 L wherein receiving the request to 
revoke the second party's certificate comprises accepting the request by 
authenticating a signature incorporated in the request with one of a list of revoker 
certificates associated with the second party's certificate. 

6. (Currently Amended) The method of claim 2 A wherein th o-sefve r initiating 
e ommunication with a first party fu rth e r corrmrises th e s e rv e r farther comprising 
sending an email message to an email address for the first party. 

Claims 7-1 0 (Cancelled) 

J L (Currently Amended) A proc e ssor based serv er-system comprising: 

a server having an integrated circuit coupled with a storage medium via a bus. The 
server further having a registration database to register a first party and a 
second party, wherein the first part is registered as a relying party for a 
second party's certificate s the server further having: 

■ 

* 

a revocation module to revoke the second party's certificate after the first party is 
regi stere d, wherein the revocation is performed according to a revocation 
policy ; and 

an interface wkh -to facili tate communication of the server with a communication 
network to initiate communication to indicate to the first party that the 
second party's certificate has been revoked , wherein the communication 
includes notifying the first party that the second party's certificate has 
been revoked, wherein the notification is farther sent to other parties 
registering with the database as relying on the second party's certificate . 
Claims 12-25 (Cancelled) 
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26* (New) A machine-readable medium comprising instructions which> when 
executed, further cause a machine to: 

registering a first party and a second party with a database at a server, wherein the 
first part is registered as a party relying on a second party's certificate; 

♦ 

revoking the second party's certificate after registering the first party, wherein the 

* 

revocation is performed according to a revocation policy; and 
initiating communication with the first party to indicate that the second party's 
certificate has been revoked, wherein the communication includes 
notifying the first party that the second party's certificate has been 
revoked, wherein the notification is further sent to other parties registering 
with the database as relying on the second party's certificate. 

27. (New) The machine-readable medium of claim 26, wherein revoking the second 
party's certification further comprises: receiving a request to revoke the second 
party's certificate; and revoking the second party's certificate in accordance with a 
revocation policy associated with the second party's certificate in response to the 

* 

request. 

28. (New) The machine-readable medium of claim 27, wherein initiating 
communication with the first party further comprises sending a revocation 
message to a machine that is associated with the first party. 

29. (New) The machine-readable medium of claim 28, further comprising the 
machine associated with the first party verifying the authenticity of the revocation 
message and modifying access control information of the machine to indicate the 
revocation of the second party's certificate. 
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30. (New) The machine-readable medium of claim 26, wherein receiving the request 
to revoke the second party's certificate comprises accepting the request by 
authenticating a signature incorporated in the request with one of a list of revoker 
certificates associated with the second party's certificate. 

31. (New) The machine-readable medium of claim 26, wherein the server initiating 
communication with a first party further comprises the server sending an email 
message to an email address for the first party. 

32. (New) The system of claim 1 1 , wherein the revoking module is further to receive 
a request to revoke the second party's certificate; and revoking the second party's 
certificate in accordance with a revocation policy associated with the second 
party's certificate in response to the request, 

33. (New) The system of claim 1 1 , wherein the communication network is further to 
send a revocation message to a machine that is associated with the first party. 

34. (New) The system of claim 32, wherein the revoking module is further to accept 
the request by authenticating a signature incorporated in the request with one of a 
list of revoker certificates associated with the second party's certificate. 

35. (New) The system of claim 1 1, wherein the server is further to send an email 
message to an email address for the first party. 



5 



Attorney Docket No. 42P14058 
Application No. 10/622,286 



PAGE 10/13 * RCVD AT 1011912007 5:50:12 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-3l2fl * DNIS:2738300 * CSID:3037406962 * DURATION (mm-ss):04-00 



